CVE-2021-33652

HIGH

Apache Flink - Info Disclosure

Title source: llm

Description

When the Reduce operator run operation is executed, if there is a value of 0 in the parameter axis_sizes element, it will cause a division by 0 exception.

References (1)

[Patch, Third Party Advisory] https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-003_en.md

Scores

CVSS v3 7.5

EPSS 0.0043

EPSS Percentile 62.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-369

Status published

Affected Products (2)

mindspore/mindspore < 1.3.0

mindspore/mindspore

Timeline

Published Jun 27, 2022

Tracked Since Feb 18, 2026